Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: O8JTAIpMpoKJlL1/TYkAw8Udp8pW4Woa7FKoZKAJN20=
Subject key identifier: 17:B5:6B:B4:05:72:87:16:89:0E:3E:1E:4F:7B:69:F6:22:81:90:CE
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 01A137ED23F3EC0B2FF571BC8D388B5BEB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0EF9
Signing time: Wed 14 Oct 2026 01:00:50 +0000
Manifest this update: Wed 14 Oct 2026 01:00:50 +0000
Manifest next update: Thu 15 Oct 2026 01:00:50 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: cP9fdDL2KATRFq/Y/nNuCpzBAM311FV5a6Q/555WGAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ed:23:f3:ec:0b:2f:f5:71:bc:8d:38:8b:5b:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Oct 14 01:00:50 2026 GMT
Not After : Oct 15 01:00:50 2026 GMT
Subject: CN=17b56bb405728716890e3e1e4f7b69f6228190ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:a1:1f:4c:37:17:e8:28:2f:f7:31:cb:52:
ff:bc:4a:f6:68:23:5c:4a:00:b4:ca:13:d6:84:ec:
a7:65:8a:07:47:8d:62:28:8b:6f:8b:0e:c0:8f:25:
cb:1c:5c:33:40:40:b5:5e:0e:f3:fc:10:2b:1d:f1:
1c:2b:ad:51:74:c3:f6:49:b7:a8:d3:a5:24:1a:91:
4b:8b:58:b9:48:3d:06:80:d9:df:2e:f8:5c:fa:4d:
9d:a6:5b:33:a2:f5:ec:6a:0c:0b:c7:d2:1c:a7:a0:
3b:75:76:97:d9:37:8d:5b:9f:cd:c9:2d:d2:b8:69:
ec:28:53:5d:74:a6:04:66:40:d6:5c:43:ce:59:92:
23:57:cf:e6:83:60:57:ff:f9:f3:f8:11:96:2f:71:
74:a3:50:df:e4:d6:92:57:1f:8c:6d:f0:df:97:91:
b6:d5:e1:51:72:e7:6d:ff:fc:86:29:87:4e:4b:5f:
ae:41:4a:6a:39:5d:57:99:8c:20:2d:13:cc:33:46:
18:79:45:d1:18:f3:71:66:53:84:79:e3:fa:37:63:
54:b6:53:7d:86:0c:c7:26:6b:f6:17:43:f3:bd:89:
f6:9c:60:93:9b:65:3e:7e:09:1f:56:f2:f3:05:b1:
88:95:29:1f:c5:4e:8c:e9:26:b2:0c:a8:0e:c4:88:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:6B:B4:05:72:87:16:89:0E:3E:1E:4F:7B:69:F6:22:81:90:CE
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fd:85:0d:b9:7f:a9:c2:57:82:ed:8c:4f:92:26:9f:14:31:
71:fe:3d:ca:88:ad:bc:79:a2:4d:23:1a:38:5b:41:b0:ab:0b:
71:a5:ae:07:9a:0d:31:dc:9c:85:0c:ee:51:4f:10:50:b2:8e:
ac:9d:8c:20:c7:15:d2:d1:ee:24:26:f7:81:32:e8:65:c0:66:
a5:65:26:d4:3b:cc:08:f7:b1:8f:7d:71:60:9d:01:91:8e:89:
b0:7e:01:6c:43:bf:6e:07:4b:69:1f:25:89:0e:e3:05:68:a3:
0f:c2:27:6f:8e:52:99:4c:65:49:3c:5c:15:39:cb:0f:4d:57:
90:a8:fb:63:ee:87:ae:c1:d9:f6:62:ea:c6:61:38:d3:d7:70:
75:5d:f3:e8:0b:c8:f3:84:ec:24:22:47:f2:a2:99:6a:2f:51:
f0:3a:3b:be:12:aa:56:8e:16:40:f2:86:51:91:f2:58:c9:68:
e0:a1:37:c9:29:ee:61:a5:5f:c9:25:d5:cb:40:58:1c:92:13:
cd:75:e0:8c:20:fa:5a:85:43:c4:56:d9:8e:d8:bd:f5:f3:7c:
bd:d1:0d:98:f0:f6:c1:cb:ce:41:5c:97:64:d1:2c:05:98:5b:
c3:0d:d6:e2:f4:07:fa:f2:ac:6e:f4:42:02:b7:6b:02:d3:fa:
87:f7:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:58:32 2026 by rpki-client